People shared private chats with Claude. Then strangers found those Claude chats indexed by Google, wallet details and all.

The chats also held access keys, CVs and company files. Anthropic, the company behind Claude, had not addressed the matter as of this writing.

Claude Chats Indexed by Google, Explained

A Reddit thread over the weekend showed the problem. One simple search brought up page after page of shared Claude chats.

People in the thread blamed a missing “noindex” tag. That tag tells Google to hide a page. The real cause looks different. Anthropic’s robots.txt file tells search engines to skip its share pages.

Here is the catch. Google will not open a blocked page. So it never sees the hide tag inside.

Picture a locked door with a note taped behind it. Nobody gets in. Nobody reads the note either.

Google can still show the web address. Other sites link to it, so Google knows it exists. Google just cannot see what sits on the page. Its own guide spells this out.

That fits the screenshots going round on X. Under each Claude link, Google said “No information is available for this page.” Bing showed a similar line.

So the chats never appeared in search previews. But anyone who spotted a link could click it and read the lot.

What the Share Button Really Does

Claude chats are private by default. That changes only when a user clicks Share.

Share builds a public web page. It holds every message sent up to that moment.

Two things stay out, according to Anthropic’s own help pages. Uploaded files are not included. Nor is raw data pulled in by connected tools.

Team and Enterprise accounts cannot share in public at all. This one lands on free, Pro and Max users.

Old links sit under Settings, Privacy, then Shared chats. Click Unshare to kill one.

Why Crypto Users Should Care

Developers flagged it, noting that wallet details and login credentials sat among the results, with some allegedly being able to read strangers’ chats through Brave Search.

For crypto, the stakes differ. A leaked password can be changed. A leaked private key cannot, as BeInCrypto has shown in past private key leak losses.

Small wallets are already the main target. Chainalysis counted 158,000 personal wallet hacks in 2025. Those hit 80,000 people and cost $713 million.

The 2022 figure was 54,000. None of it is tied to AI chats. It simply shows where thieves now spend their time.

More traders also connect AI to wallets to move funds and check code. Researchers have flagged tools that could expose wallet seed phrases as well.

One caution belongs here. Nobody has confirmed a seed phrase or a working key in the indexed chats. Nobody has reported stolen funds either.

Some developers pushed back too. Those pages were public by choice, they argued.

What Happens Next

The pages have gone from search. They have not gone away. Anyone with a saved link can still open the chat. Only the owner can stop that, by unsharing.

This has happened before. Google indexed just under 600 Claude chats in September 2025, as Forbes reported. OpenAI had dropped its own public sharing option a month earlier. It now faces a ChatGPT data sharing lawsuit.

A clean fix exists. Let Google open the share pages, then add the hide tag there.

Whether Anthropic does it will decide if this happens a third time.

Source: BeInCrypto